Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
coincomms.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Listed as unsafeGoogle | Risk |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page site on a free hosted subdomain, titled "Find your coin, people, community." Its short homepage text points to a crypto-oriented discovery or community service, but it presents no clearly described product, operator, or business model. Its apparent purpose is to draw visitors into a coin and community offering.
Scam/Impersonation Risk
Contradictory signals are present and decisive. The site is blacklisted: a major browser safe-browsing service classifies it under the social-engineering category, and a broad set of independent security engines, including several top-tier vendors, flag it as malicious. A threat-intelligence kill-switch was triggered by these detections, which caps the assessment at a critical level. No conflicting legal identities and no explicit brand impersonation were observed, so the risk rests on the external detections, not on identity inconsistency. The crypto-themed "find your coin" positioning is the kind of lure commonly used in social-engineering campaigns. The sandbox did not observe wallet-connection prompts, drainer behaviour, clipboard manipulation, hidden forms, or cloaking, but the absence of these behaviours does not offset the reputational listings. The homepage also produced a notably high volume of console errors, which is consistent with an unfinished or poorly maintained page. Evidence:
- Homepage: classified by a major browser safe-browsing service as social engineering.
- Homepage: flagged malicious by numerous independent security engines, including several tier-one vendors.
- Homepage, sandbox: three successful runs with no external network calls, wallet interaction, or cloaking, but with a high console-error density.
Regulatory Verification Notes
The homepage is very short and gives no company name, licence, registration number, terms, privacy policy, or contact route, so on-page disclosure remains unclear and the real-world operator is not independently established. This is a verification gap in its own right and not proof of wrongdoing. Here it compounds the reputational listings. No third-party broker or regulatory-database match was found for the site, so no external regulatory standing can be attributed to it. The valid certificate and recognised hosting network are baseline hygiene only. They do not substantiate identity or legitimacy. Evidence:
- Homepage: no operator name, licence, or registration reference is published.
- Site hosting: served from AS13335 (Cloudflare, Inc., US).
- Site transport encryption: TLS certificate issued by WE1 with domain-validation (DV) only, valid to 2027-01-11.
- Third-party broker dataset: no match for this site.
What to Verify Next
Because the site is on an active threat listing, the first step is to check the current listing status with the relevant safe-browsing and reputation services, and to treat the site as unsafe until any listing is cleared. If a relationship with the site is still being considered, the claimed operator should be identified through an independent route and checked against the appropriate company and financial-regulator registries. Any official support or contact channel should be confirmed through an offline, independent source. Evidence:
- Homepage: no named operator against which to run a registry check.
- Safe-browsing and reputation listings: currently active against the site.
- Site disclosures: no licence or registration claim exists to be checked.
Summary Verdict
The overall posture is critical and clearly cautionary. Confirmed external threat listings outweigh every neutral or positive technical signal. The thin, anonymous page gives no substantive basis for trusting the site. The evidence does not support treating it as a legitimate service.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin host is not observable, so the underlying hosting cannot be verified independently and content could be swapped quickly. The transport certificate is valid. This protective infrastructure is a mitigating factor only. It says nothing about the operator's intent and cannot offset the reputation risk.
Closing Assessment
The site should not be used for login, credential entry, wallet connection, or any financial interaction, and nothing should be downloaded from it. If the page must be viewed, it should be opened read-only in an isolated environment.
Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, registration and ownership, behaviour in a sandbox.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
03 Behaviour in a sandbox
- The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of coincomms.pages.dev.
- The request stayed on coincomms.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c9a |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-11 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 1 match |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about coincomms.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.